CVE-2015-8721: Buffer overflow in the tvb_uncompress function in epan/tvbuff_zlib.c in Wireshark 1.12.x before 1.12.9 and...

Security readout for executives and security teams

CVE-2015-8721 is a Wireshark crash vulnerability. A maliciously crafted packet using zlib compression can trigger a buffer overflow while Wireshark decompresses packet data, causing the application to stop. The cited sources describe denial of service, not data theft or remote code execution. Exposure is most likely on analyst workstations, packet inspection systems, and workflows that open untrusted capture files or process live untrusted traffic with affected Wireshark versions. The source bundle does not identify broader affected products beyond Wireshark and downstream distributions. Prioritize remediation where Wireshark processes untrusted traffic or capture files in operational monitoring. Business impact is primarily analyst downtime or disrupted packet analysis, not proven compromise. Patch during normal security maintenance unless the tool is exposed to high-risk traffic sources. Mitigation focus: Upgrade Wireshark 1.12 deployments to 1.12.9 or later.; Upgrade Wireshark 2.0 deployments to 2.0.1 or later.; Apply distribution fixes referenced by Debian, Gentoo, or relevant vendor advisories..

Prepared

Jun 13, 2026, 21:26 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.